I've been looking for a way to delete excessive client events through a db query. I can't find the tables where these events reside in the db. Any tips?
Found my own answer. It's under EpoProductEvents, TVDThreatname.
You might want start with that article if you are concerned about DB size. I'd prefer going through ePO itself rather than the DB itself. In case something quirky happens you want a path to support.